[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] FW-1/StoneBeat State SYNC
Hi, I had a problem where one of out stone beat fw-1 nodes took down our network. It appeared that the transfer of the connection state table information was not occuring between the private interfaces. I redid the putkeys and the errors stopped in fwd.elg(log below) Has anybody ever experienced this? Does one need to do putkeys between the 2 firewall nodes or just fw's modules <--> managemnet server? How does one prevent this? I am aware of the putkey authenication problems and that checkpoint is adressing them. The cluster has worked fine for many months. Thanx Eric Appelboom South Africa fwd: Connected to Sync Server 192.168.0.1 fwd: fwd : starting old sync client fwd: Got Sync Connection from 192.168.0.1 fwd: Resyncing 1 firewall. fwd: End Sync Connection from 192.168.0.1 fwd: Got Sync Connection from 192.168.0.1 fwd: Sync Server 192.168.0.1 went down fwd: Connected to Sync Server 192.168.0.1 fwd: Sync Server 192.168.0.1 went down fwd: Connected to Sync Server 192.168.0.1 fwd: Sync Server 192.168.0.1 went down fwd: Connected to Sync Server 192.168.0.1 fwd: Resyncing 1 firewall. fwd: End Sync Connection from 192.168.0.1 fwd: Got Sync Connection from 192.168.0.1 fwd: Resyncing 1 firewall. fwd: End Sync Connection from 192.168.0.1 fwd: Got Sync Connection from 192.168.0.1 fwd: Log Server 192.168.0.3 went down fwd: FW: Received new control security key from 192.168.0.3 <- re-established authentication fwd: logsys_add_connection_packet_e: recursive call, return fwd: FireWall-1 daemon going to die on sig 15 <- restart firewall module fwd: Sun May 6 13:38:56 2001 fwd: FireWall-1 server is running fwd: fwd : starting old sync client fwd: Got Sync Connection from 192.168.0.1 <- fw-1 management server module restarted fwd: Connected to Sync Server 192.168.0.1 <-last message sunday morning 11h00 serra-angel# Eric Appelboom M-Web Security ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|